MA
Product
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
7
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7856 | 8.1 | Aug 29 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion Affected: through 5.7.0.1 |
| CVE-2026-16776 | 6.4 | Oct 10 | MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Affected: through 5.14.2 |
| CVE-2024-13157 | 6.4 | Jan 31 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed Affected: through 5.9.3 |
| CVE-2024-10268 | 5.4 | Nov 19 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode Affected: through 5.8 |
| CVE-2024-5664 | 5.4 | Jul 10 | MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode Affected: through 5.5 |
| CVE-2026-1219 | 5.3 | Feb 19 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure Affected: 4.0 through 5.10 |
| CVE-2026-1249 | 5.0 | Feb 14 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery Affected: 5.3 through 5.10 |
Showing 7